xp clients not binding to dns JBeckett [MCSA] 4/30/2007 3:58:04 PM Bear with me...I'm not sure if I'm describing this problem correctly. I've identified that a large number of my xp professional clients are not resolving names correctly. I first identified this when I started seeing a number of systems not receiving group policy changes and I then spotted 1054 errors in the event log saying that the domain controller could not be contacted. I verified that the clients are pointing to the correct dns servers. Additionally I have dynamic dns configured for secure and non-secure updates. Using the ldap tool (ldp.exe) I can bind the NIC to a particular DNS server and then I have no more problems. While using the utility does solve the problem I would have to do this on about 200 pc's. I would appreciate any suggestions as to what might be the cause of these pc's not correctly binding to DNS and how I might resolve the problem on a macro-scale.

Re: xp clients not binding to dns "Kevin D. Goodknecht Sr. [MVP]" <admin[ at ]nospam.WFTX.US> 5/1/2007 12:41:37 AM Read inline please. In news:6BD921AA-51C2-428B-B743-799A0C558A94[ at ]microsoft.com, JBeckett [MCSA] <JBeckettMCSA[ at ]discussions.microsoft.com> typed: [Quoted Text] > Bear with me...I'm not sure if I'm describing this problem correctly. > > I've identified that a large number of my xp professional clients are > not resolving names correctly. I first identified this when I started > seeing a number of systems not receiving group policy changes and I > then spotted 1054 errors in the event log saying that the domain > controller could not be contacted. I verified that the clients are > pointing to the correct dns servers. Additionally I have dynamic dns > configured for secure and non-secure updates. > > Using the ldap tool (ldp.exe) I can bind the NIC to a particular DNS > server and then I have no more problems. While using the utility does > solve the problem I would have to do this on about 200 pc's. > > I would appreciate any suggestions as to what might be the cause of > these pc's not correctly binding to DNS and how I might resolve the > problem on a macro-scale. Can you post the ipconfig /all from the XP clients? Multi-homed DCs can also cause issues like this, too. -- Best regards, Kevin D. Goodknecht Sr. [MVP] Hope This Helps Send IM: http://www.icq.com/people/webmsg.php?to=296095728 =================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue, to respond directly to me remove the nospam. from my email address. =================================== http://www.lonestaramerica.com/ http://support.wftx.us/ http://message.wftx.us/ =================================== Use Outlook Express?... Get OE_Quotefix: It will strip signature out and more http://home.in.tum.de/~jain/software/oe-quotefix/ =================================== Keep a back up of your OE settings and folders with OEBackup: http://www.oehelp.com/OEBackup/Default.aspx ===================================

Re: xp clients not binding to dns JBeckett [MCSA] 5/1/2007 3:20:00 PM My DCs do have two NICs in them but only one of the NICs is plugged in and configured...perhaps I should disable the unused NICs. Here is output from one of my erroring systems: Windows IP Configuration Host Name . . . . . . . . . . . . : mobis75 Primary Dns Suffix . . . . . . . : dvmc.local Node Type . . . . . . . . . . . . : Unknown IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : dvmc.local Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Compaq NC3120 Fast Ethernet NIC Physical Address. . . . . . . . . : 00-08-C7-DA-ED-BB Dhcp Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 172.16.11.75 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 172.16.11.254 DNS Servers . . . . . . . . . . . : 172.16.1.186 172.16.1.133

Re: xp clients not binding to dns "Kevin D. Goodknecht Sr. [MVP]" <admin[ at ]nospam.WFTX.US> 5/2/2007 3:14:43 AM Read inline please. In news:300B9852-E4D0-4330-9F78-7B70A12189F7[ at ]microsoft.com, JBeckett [MCSA] <JBeckettMCSA[ at ]discussions.microsoft.com> typed: [Quoted Text] > My DCs do have two NICs in them but only one of the NICs is plugged > in and configured...perhaps I should disable the unused NICs. Yes, you should disable unused NICs, if you just leave the cable disconnected the NICs will aquired an APIPA 169.254.x.x Address. Here is > output from one of my erroring systems: > > Windows IP Configuration > Host Name . . . . . . . . . . . . : mobis75 > Primary Dns Suffix . . . . . . . : dvmc.local > Node Type . . . . . . . . . . . . : Unknown > IP Routing Enabled. . . . . . . . : No > WINS Proxy Enabled. . . . . . . . : No > DNS Suffix Search List. . . . . . : dvmc.local > Ethernet adapter Local Area Connection: > Connection-specific DNS Suffix . : > Description . . . . . . . . . . . : Compaq NC3120 Fast > Ethernet NIC Physical Address. . . . . . . . . : > 00-08-C7-DA-ED-BB Dhcp Enabled. . . . . . . . . . . : No > IP Address. . . . . . . . . . . . : 172.16.11.75 > Subnet Mask . . . . . . . . . . . : 255.255.255.0 > Default Gateway . . . . . . . . . : 172.16.11.254 > DNS Servers . . . . . . . . . . . : 172.16.1.186 > 172.16.1.133 I was under the assumption that all the computers were on the same subnet. Can you post the ipconfig /all from at least one of the DCs? The DC/DNS servers are not on the same network as the clients? Typically, 172.16 Addresses are on a /16 subnet with a mask of 255.255.0.0, With this setup the DNS servers are on a different subnet, which may be why you can't connect to them. -- Best regards, Kevin D. Goodknecht Sr. [MVP] Hope This Helps Send IM: http://www.icq.com/people/webmsg.php?to=296095728 =================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue, to respond directly to me remove the nospam. from my email address. =================================== http://www.lonestaramerica.com/ http://support.wftx.us/ http://message.wftx.us/ =================================== Use Outlook Express?... Get OE_Quotefix: It will strip signature out and more http://home.in.tum.de/~jain/software/oe-quotefix/ =================================== Keep a back up of your OE settings and folders with OEBackup: http://www.oehelp.com/OEBackup/Default.aspx ===================================

Re: xp clients not binding to dns JBeckett [MCSA] 5/2/2007 3:29:01 PM Thanks again for all of your help. Here is the output from one of my DCs: Windows IP Configuration Host Name . . . . . . . . . . . . : dc1 Primary Dns Suffix . . . . . . . : dvmc.local Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : dvmc.local Ethernet adapter Local Area Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet Physical Address. . . . . . . . . : 00-06-5B-3D-D6-DC DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 172.16.1.133 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 172.16.1.254 DNS Servers . . . . . . . . . . . : 127.0.0.1 172.16.1.186 Primary WINS Server . . . . . . . : 172.16.1.185

Re: xp clients not binding to dns "Kevin D. Goodknecht Sr. [MVP]" <admin[ at ]nospam.WFTX.US> 5/2/2007 5:35:12 PM Read inline please. In news:4D4A5B83-61B0-4B04-99DE-2C9EFCC1B949[ at ]microsoft.com, JBeckett [MCSA] <JBeckettMCSA[ at ]discussions.microsoft.com> typed: [Quoted Text] > Thanks again for all of your help. Here is the output from one of my > DCs: > > Windows IP Configuration > > Host Name . . . . . . . . . . . . : dc1 > Primary Dns Suffix . . . . . . . : dvmc.local > Node Type . . . . . . . . . . . . : Hybrid > IP Routing Enabled. . . . . . . . : No > WINS Proxy Enabled. . . . . . . . : No > DNS Suffix Search List. . . . . . : dvmc.local > > Ethernet adapter Local Area Connection: > Connection-specific DNS Suffix . : > Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit > Ethernet Physical Address. . . . . . . . . : 00-06-5B-3D-D6-DC > DHCP Enabled. . . . . . . . . . . : No > IP Address. . . . . . . . . . . . : 172.16.1.133 > Subnet Mask . . . . . . . . . . . : 255.255.255.0 > Default Gateway . . . . . . . . . : 172.16.1.254 > DNS Servers . . . . . . . . . . . : 127.0.0.1 > 172.16.1.186 > Primary WINS Server . . . . . . . : 172.16.1.185 So are all these machines on the same physical network? -- Best regards, Kevin D. Goodknecht Sr. [MVP] Hope This Helps Send IM: http://www.icq.com/people/webmsg.php?to=296095728 =================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue, to respond directly to me remove the nospam. from my email address. =================================== http://www.lonestaramerica.com/ http://support.wftx.us/ http://message.wftx.us/ =================================== Use Outlook Express?... Get OE_Quotefix: It will strip signature out and more http://home.in.tum.de/~jain/software/oe-quotefix/ =================================== Keep a back up of your OE settings and folders with OEBackup: http://www.oehelp.com/OEBackup/Default.aspx ===================================

Re: xp clients not binding to dns JBeckett [MCSA] 5/2/2007 7:45:00 PM Yes.

Re: xp clients not binding to dns "Kevin D. Goodknecht Sr. [MVP]" <admin[ at ]nospam.WFTX.US> 5/2/2007 11:29:58 PM This is a multi-part message in MIME format. ------=_NextPart_000_070B_01C78CE7.E38BEA40 Content-Type: text/plain; charset="Utf-8" Content-Transfer-Encoding: quoted-printable Read inline please.=20 =20 In news:A72F3732-FCC0-4FCD-8D51-2D0555551214[ at ]microsoft.com, JBeckett [MCSA] <JBeckettMCSA[ at ]discussions.microsoft.com> typed: [Quoted Text] > Yes. Then this is your problem. Clients: > IP Address. . . . . . . . . . . . : 172.16.11.75 > Subnet Mask . . . . . . . . . . . : 255.255.255.0 DC/DNS: > IP Address. . . . . . . . . . . . : 172.16.1.133 > Subnet Mask . . . . . . . . . . . : 255.255.255.0 They are on the same physical network at different subnets. Change the = clients to 172.16.1.x or change the servers to 172.16.11.x or change the = subnet mask on all machines to 255.255.0.0 or 255.255.240.0. Check the = CIDRs below, notice the first and last usable IP in each CIDR. You would = need a router between the servers and the clients with the IP/Subnet = Mask combination you have. See: CIDR range 172.16.1/24=20 Netmask 255.255.255.0=20 Wildcard Bits 0.0.0.255=20 First IP in range 172.16.1.0 (network address)=20 Last IP in range 172.16.1.255 (broadcast address)=20 First useable IP in range 172.16.1.1=20 Last useable IP in range 172.16.1.254=20 Number of useable IPs in range 254=20 CIDR range 172.16.11/24=20 Netmask 255.255.255.0=20 Wildcard Bits 0.0.0.255=20 First IP in range 172.16.11.0 (network address)=20 Last IP in range 172.16.11.255 (broadcast address)=20 First useable IP in range 172.16.11.1=20 Last useable IP in range 172.16.11.254=20 Number of useable IPs in range 254=20 CIDR range 172.16/16=20 Netmask 255.255.0.0=20 Wildcard Bits 0.0.255.255=20 First IP in range 172.16.0.0 (network address)=20 Last IP in range 172.16.255.255 (broadcast address)=20 First useable IP in range 172.16.0.1=20 Last useable IP in range 172.16.255.254=20 Number of useable IPs in range 65534=20 It would also be possible to change you mask on all machines to = 255.255.240.0 and get them communicating. CIDR range 172.16/20=20 Netmask 255.255.240.0=20 Wildcard Bits 0.0.15.255=20 First IP in range 172.16.0.0 (network address)=20 Last IP in range 172.16.15.255 (broadcast address)=20 First useable IP in range 172.16.0.1=20 Last useable IP in range 172.16.15.254=20 Number of useable IPs in range 4094=20 --=20 Best regards, Kevin D. Goodknecht Sr. [MVP] Hope This Helps Send IM: http://www.icq.com/people/webmsg.php?to=3D296095728 =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue, to respond directly to me remove the nospam. from my email address. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D http://www.lonestaramerica.com/ http://support.wftx.us/ http://message.wftx.us/ =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Use Outlook Express?... Get OE_Quotefix: It will strip signature out and more http://home.in.tum.de/~jain/software/oe-quotefix/ =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D Keep a back up of your OE settings and folders with OEBackup: http://www.oehelp.com/OEBackup/Default.aspx =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D ------=_NextPart_000_070B_01C78CE7.E38BEA40 Content-Type: text/html; charset="Utf-8" Content-Transfer-Encoding: quoted-printable =EF=BB=BF<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; charset=3Dutf-8"> <META content=3D"MSHTML 6.00.6000.16414" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY> <DIV><FONT size=3D2>Read inline please. <BR> <BR> In </FONT><A = href=3D"news:A72F3732-FCC0-4FCD-8D51-2D0555551214[ at ]microsoft.com"><FONT=20 size=3D2>news:A72F3732-FCC0-4FCD-8D51-2D0555551214[ at ]microsoft.com</FONT></= A><FONT=20 size=3D2>,<BR>JBeckett [MCSA] <</FONT><A=20 href=3D"mailto:JBeckettMCSA[ at ]discussions.microsoft.com"><FONT=20 size=3D2>JBeckettMCSA[ at ]discussions.microsoft.com</FONT></A><FONT = size=3D2>>=20 typed:<BR>> Yes.<BR></FONT></DIV> <DIV><FONT size=3D2>Then this is your problem.</FONT></DIV> <DIV><FONT size=3D2>Clients:</FONT></DIV> <DIV><FONT size=3D2>>         = IP=20 Address. . . . . . . . . . . . :=20 172.16.11.75<BR>>         = Subnet Mask=20 .. . . . . . . . . . . : 255.255.255.0</FONT></DIV> <DIV><FONT size=3D2></FONT> </DIV> <DIV><FONT size=3D2></FONT> </DIV> <DIV><FONT size=3D2>DC/DNS:</FONT></DIV> <DIV><FONT size=3D2>>    IP Address. . . . . . . . . . = .. . :=20 172.16.1.133<BR>>    Subnet Mask . . . . . . . . . . . = :=20 255.255.255.0<BR></FONT></DIV> <DIV><FONT size=3D2>They are on the same physical network at different = subnets.=20 Change the clients to 172.16.1.x or change the servers to 172.16.11.x or = change=20 the subnet mask on all machines to 255.255.0.0 or 255.255.240.0. Check = the CIDRs=20 below, notice the first and last usable IP in each CIDR. You would need = a router=20 between the servers and the clients with the IP/Subnet Mask combination = you=20 have.</FONT></DIV> <DIV><FONT size=3D2></FONT> </DIV> <DIV><FONT size=3D2>See:</FONT></DIV><FONT size=3D2> <DIV> <TABLE border=3D1> <TBODY> <TR> <TD>CIDR range</TD> <TD>172.16.1/24</TD></TR> <TR> <TD>Netmask</TD> <TD>255.255.255.0</TD></TR> <TR> <TD>Wildcard Bits</TD> <TD>0.0.0.255</TD></TR> <TR> <TD>First IP in range</TD> <TD>172.16.1.0 (network address)</TD></TR> <TR> <TD>Last IP in range</TD> <TD>172.16.1.255 (broadcast address)</TD></TR> <TR> <TD>First useable IP in range</TD> <TD>172.16.1.1</TD></TR> <TR> <TD>Last useable IP in range</TD> <TD>172.16.1.254</TD></TR> <TR> <TD>Number of useable IPs in range</TD> <TD>254</TD></TR></TBODY></TABLE></DIV> <DIV> </DIV> <DIV> <TABLE border=3D1> <TBODY> <TR> <TD>CIDR range</TD> <TD>172.16.11/24</TD></TR> <TR> <TD>Netmask</TD> <TD>255.255.255.0</TD></TR> <TR> <TD>Wildcard Bits</TD> <TD>0.0.0.255</TD></TR> <TR> <TD>First IP in range</TD> <TD>172.16.11.0 (network address)</TD></TR> <TR> <TD>Last IP in range</TD> <TD>172.16.11.255 (broadcast address)</TD></TR> <TR> <TD>First useable IP in range</TD> <TD>172.16.11.1</TD></TR> <TR> <TD>Last useable IP in range</TD> <TD>172.16.11.254</TD></TR> <TR> <TD>Number of useable IPs in range</TD> <TD>254</TD></TR></TBODY></TABLE><BR><BR> <TABLE border=3D1> <TBODY> <TR> <TD>CIDR range</TD> <TD>172.16/16</TD></TR> <TR> <TD>Netmask</TD> <TD>255.255.0.0</TD></TR> <TR> <TD>Wildcard Bits</TD> <TD>0.0.255.255</TD></TR> <TR> <TD>First IP in range</TD> <TD>172.16.0.0 (network address)</TD></TR> <TR> <TD>Last IP in range</TD> <TD>172.16.255.255 (broadcast address)</TD></TR> <TR> <TD>First useable IP in range</TD> <TD>172.16.0.1</TD></TR> <TR> <TD>Last useable IP in range</TD> <TD>172.16.255.254</TD></TR> <TR> <TD>Number of useable IPs in range</TD> <TD>65534</TD></TR></TBODY></TABLE></DIV> <DIV> </DIV></FONT> <DIV><FONT size=3D2>It would also be possible to change you mask on all = machines=20 to 255.255.240.0 and get them communicating.</FONT></DIV> <DIV><FONT size=3D2></FONT> </DIV> <DIV> <TABLE border=3D1> <TBODY> <TR> <TD>CIDR range</TD> <TD>172.16/20</TD></TR> <TR> <TD>Netmask</TD> <TD>255.255.240.0</TD></TR> <TR> <TD>Wildcard Bits</TD> <TD>0.0.15.255</TD></TR> <TR> <TD>First IP in range</TD> <TD>172.16.0.0 (network address)</TD></TR> <TR> <TD>Last IP in range</TD> <TD>172.16.15.255 (broadcast address)</TD></TR> <TR> <TD>First useable IP in range</TD> <TD>172.16.0.1</TD></TR> <TR> <TD>Last useable IP in range</TD> <TD>172.16.15.254</TD></TR> <TR> <TD>Number of useable IPs in range</TD> <TD>4094</TD></TR></TBODY></TABLE><BR><BR></DIV> <DIV><BR><BR><FONT size=3D2>-- <BR>Best regards,<BR>Kevin D. Goodknecht = Sr.=20 [MVP]<BR>Hope This Helps<BR>Send IM: </FONT><A=20 href=3D"http://www.icq.com/people/webmsg.php?to=3D296095728"><FONT=20 size=3D2>http://www.icq.com/people/webmsg.php?to=3D296095728</FONT></A><B= R><FONT=20 size=3D2>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<BR>When responding to posts, = please=20 "Reply to Group"<BR>via your newsreader so that others may learn = and<BR>benefit=20 from your issue, to respond directly to<BR>me remove the nospam. from my = email=20 address.<BR>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<BR></FONT><A=20 href=3D"http://www.lonestaramerica.com/"><FONT=20 size=3D2>http://www.lonestaramerica.com/</FONT></A><BR><A=20 href=3D"http://support.wftx.us/"><FONT=20 size=3D2>http://support.wftx.us/</FONT></A><BR><A=20 href=3D"http://message.wftx.us/"><FONT=20 size=3D2>http://message.wftx.us/</FONT></A><BR><FONT=20 size=3D2>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<BR>Use Outlook Express?... Get=20 OE_Quotefix:<BR>It will strip signature out and more<BR></FONT><A=20 href=3D"http://home.in.tum.de/~jain/software/oe-quotefix/"><FONT=20 size=3D2>http://home.in.tum.de/~jain/software/oe-quotefix/</FONT></A><BR>= <FONT=20 size=3D2>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D<BR>Keep a back up of your OE = settings=20 and folders<BR>with OEBackup:<BR></FONT><A=20 href=3D"http://www.oehelp.com/OEBackup/Default.aspx"><FONT=20 size=3D2>http://www.oehelp.com/OEBackup/Default.aspx</FONT></A><BR><FONT = size=3D2>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D</FONT></DIV></BODY></HTML> ------=_NextPart_000_070B_01C78CE7.E38BEA40--